Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier: wlTFDka4F+3kGdUhBQVMpGl7X9JcQSRmIzDRPWMq860=
Subject key identifier: 91:83:E2:35:9B:C3:58:10:48:26:82:7C:ED:17:E9:D8:C8:14:7F:0B
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial: 0199FBEB27D11649D15B7BFF63648B57707F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: rpF2qQsXbgEfohXd4rM1AFwuDOKsGpmGXfy97yi2U2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:27:d1:16:49:d1:5b:7b:ff:63:64:8b:57:70:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=9183e2359bc358104826827ced17e9d8c8147f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:09:6a:72:5d:e0:57:32:5c:78:6a:ad:3a:
27:ea:2c:bd:38:b2:e1:d0:b5:cd:96:b1:08:12:d4:
1f:e5:ee:03:4d:2f:f1:41:48:21:66:05:c2:76:68:
b8:fe:65:e2:19:bd:c0:c6:83:28:a1:2c:5a:a5:59:
ae:c4:d9:77:fb:9b:54:9d:f4:96:b3:7b:c9:5d:f8:
cd:e1:44:3c:6d:68:50:7d:6c:ca:98:d7:7f:f2:6c:
de:42:ac:4c:00:f6:fe:27:d4:ce:ff:bc:21:e0:89:
c4:ce:ea:d8:d9:93:71:81:87:42:96:93:e8:05:31:
d5:6d:a7:5a:97:da:d1:09:e3:1c:40:ef:71:ed:b3:
09:cb:69:95:94:41:2c:ad:ab:67:11:51:46:ae:94:
3a:48:80:b0:63:79:00:60:fb:07:5a:2d:a8:bb:61:
82:8f:cd:36:19:ba:31:bf:5d:2f:3a:67:d5:d7:65:
16:f2:0c:b4:1b:72:16:d9:25:71:ad:c5:60:c3:03:
cf:01:ad:40:53:67:ba:92:5d:aa:f9:77:7d:e7:6b:
f7:c5:a7:b8:3e:98:7d:b8:de:3c:c9:f9:70:f2:f6:
a8:a2:aa:03:d1:fe:1d:aa:49:a6:f0:ed:ad:3b:5c:
d9:d2:52:a6:9f:df:65:83:65:dd:1d:9c:75:3a:24:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:83:E2:35:9B:C3:58:10:48:26:82:7C:ED:17:E9:D8:C8:14:7F:0B
X509v3 Authority Key Identifier:
keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e8:07:40:20:19:21:2e:8d:e7:7c:8d:5a:51:51:ef:65:84:
21:97:bb:61:b7:fc:bb:e7:ec:e4:e1:01:5c:22:d3:e9:42:97:
cd:bc:c1:6b:3e:ae:64:ce:a7:e6:48:8c:4d:c9:b7:5c:ff:32:
df:d6:85:93:30:ef:3a:66:8b:55:b7:5f:86:4b:43:8c:c6:7a:
b9:42:34:e7:99:3a:fd:ee:d3:5c:0c:e0:a7:65:54:a2:39:e7:
ce:da:98:d5:11:cf:6c:b0:ac:ea:47:a8:0d:eb:85:98:88:47:
49:a2:9e:1f:47:6a:2a:3a:9a:0e:98:f0:9e:96:b6:e7:f4:27:
dd:1e:b6:c8:9e:a6:08:e1:69:bd:59:46:9f:32:9d:60:53:6e:
92:7d:cf:b1:0f:76:d7:00:90:19:33:09:71:8c:e9:0b:59:e9:
e2:4f:c6:fa:f4:ad:55:6e:5b:34:86:09:53:ff:46:06:f7:70:
56:54:7d:83:5e:58:d6:c4:50:14:49:bb:cc:c2:ec:93:fc:b8:
e1:fd:b4:01:64:50:98:53:c3:65:d0:09:84:df:f4:1a:7c:48:
47:45:1f:2c:22:9a:bc:23:7a:38:22:b2:cd:e1:ea:29:07:8c:
3c:bb:8b:a6:12:b8:be:95:9f:50:f2:dc:b3:cd:67:41:19:c9:
ac:92:7c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:05 2025 by rpki-client